suspicious saslauthd activity

[kidsleep]

I left my machine on all night last night and left myself logged on. When I awoke this morning I found that it was at the login screen. I ran drakconf and found some activity between 4-5am attached is a text file with only the activity between that time. I'm not familiar with saslauthd and this may all be harmless, but I've gotta know. Anything I need to worry about? Have I been hacked?


TIA

[kshim5]

This looks like updates that were made to your system lately.

[kidsleep]

kshim5, I saw that as well. I'm not yet experienced enough to know what the files were though. What gets me though is how they got in. My firewall rules are pretty fierce; they block all syn packets and I don't have anything running but the X11 port 6000. I ran nmap and confirmed this only a few minutes ago. I thought about running snort but haven't done so yet. I guess now is as good a time as any. Thanks

[kshim5]

Check the dates that are printed in the file to see if they coinside with the dates that you updated your system.

[kidsleep]

Thanks man! I think that is what it was.